Threat Feed

Post a log. See how Artos Threat AI reads it.

Paste a sanitised security log and our AI returns a structured assessment: severity, likely attack path, supporting evidence and containment actions. Published analyses appear in the shared feed below.

Shared public demonstration. Anything you submit is analysed by an AI model and published to the feed on this page, visible to other visitors. Use sample or redacted data only — never real usernames, IP addresses, customer data, credentials or confidential incident details. This is a demonstration of AI-assisted analysis, not a monitoring service or security advice.

Telemetry

Security log

272 / 8000 characters

Artos AI response

The assessment will appear here after you submit a log.

Recent analyses

The most recent logs submitted through this page, newest first. Submissions are attributed to no one and contain only what visitors pasted.

high3 d ago · confidence 1%

Suspected cloud account or session compromise involving finance-admin. Token reuse across reported geographies, an unmanaged device, and role assumption without MFA warrant prompt containment. The telemetry does not establish token theft, unauthorized access, or data exfiltration.

09:41:03 auth.success user=finance-admin source=185.220.101.4 geo=NL device=unmanaged
09:41:06 oauth.token_reuse session=8fa2 previous_geo=US interval=164s
09:41:09 cloud.role_assume role=BillingAdmin mfa=not_present
09:41:12 storage.list bucket=customer-exports count=147

First action: Preserve authentication, token, role-assumption, and storage audit records; correlate principal and session identifiers before broad containment.

AI output can be incomplete or wrong. Artos reviews every real-world assessment with a human analyst before any action is taken.